Re: [PATCH] Smack: SMACK_IOCLOADACCESS

[Randy Dunlap <rdunlap@xenotime.net>]

On Fri, 26 Aug 2011 08:52:07 +0300 Jarkko Sakkinen wrote:

> IOCTL call for /smack/load that takes access rule in
> the same format as they are written into /smack/load.
> Sets errno to zero if access is allowed and to EACCES
> if not.
> 
> Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@intel.com>
> ---
>  include/linux/smack.h    |   29 ++++++++
>  security/smack/smack.h   |    1 +
>  security/smack/smackfs.c |  173 +++++++++++++++++++++++++++++-----------------
>  3 files changed, 140 insertions(+), 63 deletions(-)
>  create mode 100644 include/linux/smack.h
> 
> diff --git a/include/linux/smack.h b/include/linux/smack.h
> new file mode 100644
> index 0000000..c574713
> --- /dev/null
> +++ b/include/linux/smack.h
> @@ -0,0 +1,29 @@
> +/*
> + * Copyright (c) 2011, Intel Corporation.
> + *
> + * This program is free software; you can redistribute it and/or
> + * modify it under the terms of the GNU Lesser General Public License
> + * as published by the Free Software Foundation; either version 2.1
> + * of the License, or (at your option) any later version.
> + *
> + * This program is distributed in the hope that it will be useful,
> + * but WITHOUT ANY WARRANTY; without even the implied warranty of
> + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
> + * GNU General Public License for more details.
> + *
> + * You should have received a copy of the GNU Lesser General Public License
> + * along with this program; if not, write to the Free Software
> + * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
> + *
> + * Author:
> + *      Jarkko Sakkinen <jarkko.sakkinen@intel.com>
> + *
> + */
> +
> +#ifndef _SMACK_H
> +#define _SMACK_H
> +
> +#define SMACK_IOC_BASE 'S'
> +#define SMACK_IOC_LOAD_ACCESS _IOR(SMACK_IOC_BASE, 0, const char *)
> +
> +#endif /* _SMACK_H */

Please add this 'S' to Documentation/ioctl/ioctl-number.txt.
Thanks.

---
~Randy
*** Remember to use Documentation/SubmitChecklist when testing your code ***